Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
File: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft (raw, json)
Hash identifier: KLzJBnCztgRkEXjhB54gvEBmmdXc58AeIRTmSydroug=
Subject key identifier: D6:A4:BC:4C:4F:C2:F9:B0:A0:13:DD:A9:BB:9E:ED:8E:95:B3:09:E4
Authority key identifier: 41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
Certificate issuer: /CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Certificate serial: 019D3A544C2A2C513122DDB17F01EDFCF5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 16:01:36 +0000
Manifest this update: Sun 29 Mar 2026 16:01:36 +0000
Manifest next update: Mon 30 Mar 2026 16:01:36 +0000
Files and hashes: 1: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl (hash: c8kBWrKVbWlH2tOuvOscv5MLaJM8nkHk3ca+lYsoGWY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:4c:2a:2c:51:31:22:dd:b1:7f:01:ed:fc:f5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Validity
Not Before: Mar 29 16:01:36 2026 GMT
Not After : Mar 30 16:01:36 2026 GMT
Subject: CN=d6a4bc4c4fc2f9b0a013dda9bb9eed8e95b309e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:2a:19:07:7c:16:de:fe:77:76:c9:c8:d4:
c1:7c:95:58:40:f1:2e:24:d6:81:69:d0:de:35:7c:
d7:b2:9e:41:2a:d6:9a:a8:1d:98:ca:ff:7c:bb:7c:
1f:05:fd:c7:b5:bd:a3:f4:28:ab:cf:38:c2:60:f1:
46:8c:51:b5:79:41:28:a5:cd:d9:cb:e2:ca:5f:0a:
3f:23:1e:6b:0a:30:1c:75:5c:57:38:e5:64:7e:d8:
64:4d:c5:d0:1c:bc:74:3d:ac:4a:5f:36:b3:80:90:
90:11:90:78:f7:cc:9f:d6:0a:77:56:e1:7a:ee:44:
32:a3:d7:e9:29:f1:ff:b9:14:79:c8:d9:d6:87:3d:
32:14:1e:51:7f:79:94:c0:58:df:48:38:4f:de:7f:
ba:26:4c:34:ec:9e:3c:50:ec:7f:2b:af:6f:3d:0a:
f8:d1:a1:15:9c:b7:4c:dd:30:cd:39:cb:5d:6a:48:
05:26:a9:39:88:c5:f0:5e:1c:6d:73:64:fe:d5:31:
40:93:1b:8d:1f:d7:aa:39:30:ca:87:7e:18:47:58:
c7:21:1e:43:87:b2:7d:aa:d7:47:cc:7f:3c:41:17:
a4:b7:4e:a0:58:bb:1b:22:ea:38:55:e9:1f:fe:69:
71:5c:ed:a2:00:45:fa:14:63:60:00:8b:e9:ff:e3:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A4:BC:4C:4F:C2:F9:B0:A0:13:DD:A9:BB:9E:ED:8E:95:B3:09:E4
X509v3 Authority Key Identifier:
keyid:41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:d6:46:13:9d:b3:97:f0:93:d2:9d:2b:bb:6e:91:65:02:f1:
d2:d0:19:07:ea:b4:13:f7:be:70:2f:8f:b1:99:e1:04:a1:11:
63:1a:c7:6f:00:cd:3a:f9:20:86:9e:4a:4f:47:69:72:e4:a2:
30:4d:91:76:11:f9:d3:6f:39:7a:67:07:73:4b:34:40:b3:e3:
4f:d4:25:07:82:bb:e8:76:a3:e5:1c:49:ea:b1:54:61:f5:b3:
ad:ac:20:0d:7d:33:47:bd:df:27:2f:f2:30:bb:30:9e:bb:ea:
6e:10:49:8a:0e:40:75:60:a8:8c:25:24:b2:4f:78:7e:cc:07:
dd:9e:d4:3b:78:ae:ab:fa:95:fa:95:de:1f:41:b9:b1:eb:b5:
d1:41:52:fa:fe:fc:a9:16:4f:74:6f:8d:0b:5d:06:22:11:96:
ee:8c:2d:84:8c:f4:6c:51:1c:01:9e:f7:69:ac:1f:0e:c1:69:
bb:ce:bd:9c:fe:97:e7:ec:30:84:dd:76:90:3e:3e:29:38:1e:
ef:bb:81:76:36:57:4f:b1:69:36:21:d4:d4:29:b2:68:60:d4:
6d:ec:ff:e6:87:5e:ca:6d:30:85:d8:88:b2:a9:83:25:51:b9:
4f:84:86:34:6e:53:5f:9b:71:05:c1:fb:c7:af:88:03:23:40:
17:41:37:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:46 2026 by rpki-client